CVE-2025-58190

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,452; of 17,792 indexed, latest versions
Container images: 2,996; deployed by those charts
Fix available: 1 of 1; affected package

Infinite parsing loop in golang.org/x/net

Carried by container images the latest versions of 2,452 of 17,792 indexed charts deploy, on 2,996 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	2,996

OSV records: GO-2026-4441

Charts affected

2,452 by stars

Chart

Latest

Affected images

Radar Score

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.45.0
library/traefik :2.5.4	7d0228d19042	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.45.0

Open the chart page →

53,171

immudbcodenotary

1.9.7

1 of 1 See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
codenotary/immudb :1.9.7	7c85d7cc4f22	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

1,254

routercosmo-router

0.18.0

1 of 1 See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

1,694

dolibarrcowboysysop

9.0.3

1 of 3 See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wait4x/wait4x :3.3.1	4dcd86307de1	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

9,258

csi-wekafsplugincsi-wekafs

0.6.2-0

1 of 6 See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.45.0

Open the chart page →

2,831

daskhubdask

2024.1.1

2 of 9 See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	golang.org/x/net@v0.17.0	0.45.0
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

14,180

seafiledatamate

0.6.0

4 of 6 See more

seafile datamate 0.6.0

4 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	golang.org/x/net@v0.21.0	0.45.0
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/net@v0.26.0	0.45.0
bitnamilegacy/os-shell :11-debian-11-r96	8643af4facff	golang.org/x/net@v0.19.0	0.45.0
datamate/seafile-professional :11.0.20	2dd66b722464	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

27,465

k8s-event-loggerdeliveryhero

1.4.0

1 of 1 See more

k8s-event-logger deliveryhero 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
maxrocketinternet/k8s-event-logger :2.7	0234bdec4626	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

273

drone-runner-dockerdrone

0.7.0

2 of 3 See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.45.0
library/docker :20-dind	af96c680a7e1	golang.org/x/net@v0.4.0	0.45.0

Open the chart page →

5,692

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

1,987

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

1,767

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.45.0

Open the chart page →

3,277

lndfold

0.3.15

3 of 4 See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
thesisrobot/lnd :v0.16.4-beta-c	287129953689	golang.org/x/net@v0.8.0	0.45.0
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	golang.org/x/net@v0.0.0-20191002035440-2ec189313ef0	0.45.0
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.45.0

Open the chart page →

8,855

geonode-k8sgeonode-k8s

2.0.0

1 of 10 See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/net@v0.30.0	0.45.0

Open the chart page →

14,147

hertzbeathertzbeat

1.8.1

1 of 4 See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/net@v0.18.0	0.45.0

Open the chart page →

14,314

permission-managerkfirfer

1.0.7

1 of 1 See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

2,267

gateway-operatorkong

0.6.1

1 of 1 See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kong/gateway-operator :1.6	03510967482b	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

849

kubeflowkubeflow

1.6.2

25 of 45 See more

kubeflow kubeflow 1.6.2

25 of the 45 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.45.0
istio/proxyv2 :1.14.1	df69c1a7af7c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.45.0
kserve/kserve-controller :v0.8.0	f0692a9ea09f	golang.org/x/net@v0.0.0-20211205041911-012df41ee64c	0.45.0
kubeflow/training-operator :v1-e1434f6	ff847e2b6af0	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.45.0
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.45.0
kubeflownotebookswg/notebook-controller :v1.6.1	85e2e685abd6	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.45.0
kubeflownotebookswg/poddefaults-webhook :v1.6.1	7d42600e1524	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0
kubeflownotebookswg/profile-controller :v1.6.1	9f01767a460f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
kubeflownotebookswg/tensorboard-controller :v1.6.1	82ffdd2da285	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.45.0
metacontrollerio/metacontroller :v2.0.4	897c9601d2cc	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.2.0	f253b82941c2	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.2.0	a705c1ea8e9e	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
gcr.io/ml-pipeline/viewer-crd-controller :2.0.0-alpha.5	34403f9f94be	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.45.0

Open the chart page →

97,283

openelbkubesphere-stable

0.5.0

2 of 2 See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.5.0	b5b665c4672c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.45.0
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0

Open the chart page →

4,336

operatorkube-starrocks

1.11.7

1 of 1 See more

operator kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

556

venti-stackkuoss

0.5.0

3 of 9 See more

venti-stack kuoss 0.5.0

3 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/eventrouter :v0.4.15	6226040e1346	golang.org/x/net@v0.38.0	0.45.0
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	golang.org/x/net@v0.41.0	0.45.0
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	golang.org/x/net@v0.42.0	0.45.0

Open the chart page →

3,830

vclustermain

0.17.0

7 of 10 See more

vcluster main 0.17.0

7 of the 10 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/net@v0.8.0	0.45.0
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/net@v0.9.0	0.45.0
registry.k8s.io/etcd :3.6.4-0	e36c08168342	golang.org/x/net@v0.38.0	0.45.0
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0	0.45.0
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0

Open the chart page →

11,598

headplanenbcloud

0.1.2

2 of 4 See more

headplane nbcloud 0.1.2

2 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :latest	cd354d5b2556	golang.org/x/net@v0.41.0	0.45.0
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/net@v0.34.0	0.45.0

Open the chart page →

8,024

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0

Open the chart page →

1,589

node-local-dnsnode-local-dns

2.4.0

1 of 1 See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

2,626

goldpingerokgolove

6.2.0

1 of 1 See more

goldpinger okgolove 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
bloomberg/goldpinger :3.10.0	8520120f5598	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

715

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/net@v0.34.0	0.45.0

Open the chart page →

9,326

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

8,788

capsuleprojectcapsule

0.14.6

1 of 2 See more

capsule projectcapsule 0.14.6

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

1,238

prometheus-consul-exporterprometheus-community

1.1.1

1 of 1 See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/net@v0.29.0	0.45.0

Open the chart page →

782

prometheus-json-exporterprometheus-community

0.20.1

1 of 1 See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/net@v0.33.0	0.45.0

Open the chart page →

725

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/net@v0.35.0	0.45.0

Open the chart page →

1,065

prometheus-statsd-exporterprometheus-community

1.0.0

1 of 1 See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0	0.45.0

Open the chart page →

782

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.45.0

Open the chart page →

4,526

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0	0.45.0

Open the chart page →

1,197

policy-controllersigstore

0.10.8

1 of 2 See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned	0bcd60beb93f	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

918

steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetes

0.13.1

1 of 2 See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

5,538

uffizzi-appuffizzi-app

1.3.0

8 of 14 See more

uffizzi-app uffizzi-app 1.3.0

8 of the 14 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/net@v0.12.0	0.45.0
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	golang.org/x/net@v0.8.0	0.45.0
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0	0.45.0
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0	0.45.0
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/net@v0.17.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	golang.org/x/net@v0.17.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.45.0

Open the chart page →

19,431

wg-easywg-easy

0.1.6

1 of 1 See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15	0e7bc9d34e86	golang.org/x/net@v0.44.0	0.45.0

Open the chart page →

727

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.45.0

Open the chart page →

13,587

pod-gatewayangelnu

7.1.1

1 of 2 See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/gateway-admision-controller :v3.12.0	6f6ab596afd5	golang.org/x/net@v0.30.0	0.45.0

Open the chart page →

1,134

aperture-controlleraperture

2.34.0

2 of 5 See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/net@v0.19.0	0.45.0
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.45.0

Open the chart page →

4,679

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

3,308

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0

Open the chart page →

9,061

prometheusavesha

19.3.0

3 of 4 See more

prometheus avesha 19.3.0

3 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.45.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b	0.45.0

Open the chart page →

5,491

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0

Open the chart page →

2,250

snapschedulerbackube-helm-charts

3.5.0

2 of 2 See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	golang.org/x/net@v0.38.0	0.45.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

1,232

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

1,917

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

1,160

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

1,891

Container images carrying it

2,996 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/net@v0.14.0	0.45.0	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	golang.org/x/net@v0.17.0	0.45.0	1
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0	0.45.0	1
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	golang.org/x/net@v0.35.0	0.45.0	1
ghcr.io/openfaasltd/headroom-controller :v0.0.4	67d587cc2c39	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0	0.45.0	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/net@v0.27.0	0.45.0	1
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/openstack-exporter/openstack-exporter :1.7.0	e5146a7dd515	golang.org/x/net@v0.10.0	0.45.0	1
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	golang.org/x/net@v0.25.0	0.45.0	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/net@v0.25.0	0.45.0	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	golang.org/x/net@v0.41.0	0.45.0	1
ghcr.io/opnpulse/perses :v2026.4.24	b880da90aa1a	golang.org/x/net@v0.42.0	0.45.0	1
ghcr.io/ot-container-kit/redis-operator/redis-operator :v0.18.0	90bfeb2e0d71	golang.org/x/net@v0.24.0	0.45.0	1
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.45.0	1
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/parca-dev/parca-agent :v0.42.0	adc0eeb4dd05	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/peak-scale/capsule-argo-addon :0.7.5	087a80163971	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy :0.4.1	1838720c13b2	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0	1
ghcr.io/performancecopilot/archive-analysis :latest	8de11e2363fc	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582	0.45.0	1
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	golang.org/x/net@v0.33.0	0.45.0	1
ghcr.io/privacyengineering/consumer :main	73f59c032812	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb	0.45.0	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/projectcapsule/capsule-addon-fluxcd :0.2.2	e0baf564b706	golang.org/x/net@v0.32.0	0.45.0	1
ghcr.io/projectcontour/contour :v1.30.0	b12824d7eb58	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/projectcontour/contour :v1.33.0	cd6e13fa882d	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.45.0	1
ghcr.io/pschichtel/cert-manager-webhook-cloudns :1.1.0	1020638bbe23	golang.org/x/net@v0.20.0	0.45.0	1
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.45.0	1
ghcr.io/pulumi/pulumi-esc-csi-provider :0.1.1	3fb058e93502	golang.org/x/net@v0.32.0	0.45.0	1
ghcr.io/punchplatform/operator :8.1-dev	2a9536c8cee2	golang.org/x/net@v0.20.0	0.45.0	1
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/net@v0.31.0	0.45.0	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	golang.org/x/net@v0.40.0	0.45.0	1
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	golang.org/x/net@v0.2.0	0.45.0	1
ghcr.io/riotkit-org/backup-repository :v4.0.0	ab41ffa78f69	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd	0.45.0	1
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	golang.org/x/net@v0.23.0	0.45.0	1
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0	0.45.0	1
ghcr.io/rvbsalgado/fencemaster :1.0.0-rc.20	7056a6aae439	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/sagernet/sing-box :v1.12.0	3c1ee82d450d	golang.org/x/net@v0.42.0	0.45.0	1
ghcr.io/salesforce/kubelet-summary-exporter :sha-c2bf90d	377e09d2dd72	golang.org/x/net@v0.8.0	0.45.0	1
ghcr.io/salesforce/sloop :sha-2ce8bbe	119e24f24b1d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.45.0	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	golang.org/x/net@v0.30.0	0.45.0	1
ghcr.io/sapcc/ntp_exporter :v2.9.0	79c40c65f5d4	golang.org/x/net@v0.43.0	0.45.0	1